php-testing
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to perform standard development tasks using
composerand PHP test runners (phpunit,pest). These are routine operations for a software development assistant. - [EXTERNAL_DOWNLOADS]: The instructions involve downloading official testing frameworks from well-known package registries via Composer and referencing official documentation sites such as phpunit.de and pestphp.com. These sources are established and safe for software development purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves reading the target codebase to identify existing test structures, creating an ingestion surface for project-specific data.
- Ingestion points: Existing test files and configuration files (phpunit.xml, Pest.php) identified during codebase exploration in the
fuse-ai-pilot:explore-codebasestep. - Boundary markers: The skill does not define explicit delimiters for codebase content, relying on the underlying agent's context window management.
- Capability inventory: The agent is authorized to execute shell commands for dependency management and test execution.
- Sanitization: Not applicable, as the skill focus is on analyzing the structure of valid source code for the purpose of generating test cases.
Audit Metadata